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We present a method for intrusion detection which is based on the Mach-Zehnder interference effect. This 
device provides monitored surveillance by continuously measuring the intensity of light collected by a pair of 
photodetectors. We find that our protocol allows for the detection of intrusion attempts which employ path- 
redirection and/or intercept-resend techniques. Expectation values for the registered output flux are provided 
for normal and interrupted operation. 



Introduction - Optical tripwire systems offer quick intru- 
sion notification in most scenarios, e.g., fiber cutting or beam 
blocking intrusions. The tripwire usually consists of a laser 
beam, which in turn consists of a large collection of photons. 
This presents a vulnerability which could be exploited in a so- 
phisticated attack. By tapping off a small portion of the orig- 
inal signal, an adversary can determine, with high precision, 
the properties inherent to the surveillance beam while leav- 
ing the majority of the signal unaffected |[T][2]. This can be 
achieved for both unmodulated and modulated waveforms. If 
the interrogated signal strength is sufficiently weak, the char- 
acteristics of the tripwire could be determined using direct 
detection and dyne detection without causing alarm. A de- 
coy source could then be used to mimic the original signal. 
The decoy source could be set in place, for instance, during a 
forced power outage, and constructed to switch on remotely. 
This would provide unannounced entry and exit between the 
two sources at any later time. 

In this paper, we present a method for intrusion detec- 
tion which circumvents this issue. Our method is based on 
the Mach-Zehnder interference (MZI) effect [3| and provides 
surveillance by continuously measuring the intensity of light 
collected by a pair of photodetectors. Under normal condi- 
tions, each photodetector output current per signal pulse is ex- 
pected to remain constant. When an intruder passes through 
the secured perimeter, the output signal drops, signaling an 
alarm. This feature is shared with common laser tripwire de- 
signs. However, our contribution closes the intercept-resend 
vulnerability facing existing optical monitoring techniques by 
using MZI to test the integrity and authenticity of the trans- 
mitted signal. Thus, our method offers an additional layer of 
security relative to classical optical sensors. Like earlier ef- 
forts employing related effects JUS], a quantum optical sen- 
sor can mitigate the redirection and intercept-resent vulnera- 
bilities facing their classical counterparts. 

Normal operation. — An illustration of the sensor is given 
in Fig. [T] The setup consists of a balanced Mach-Zehnder in- 
terferometer with a photon source located at port s. The left 
L, top T, and right R arms of the interferometer constitute 
the secured perimeter (i.e., the fence) while regions specified 
with a shaded box are assumed to be secured enclaves. Let 
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IlJtJr, an d Ib denote the unperturbed path lengths of the 
lower, top, right, and bottom arms. Under normal, uninter- 
rupted operation, It, + It + Ib. = Ib- 

The transformation describing the action of the first beam 
splitter is given by XJ\ = exp [i7r(d^s + as^)/4] . Using 
the Campbell-Baker-Haussdorff formula, we may solve the 
Heisenberg equations u\ = u\sU\ and g — u\aU\ to ob- 
tain Ui = (s + ia)/"/2 and g = (a + is)/\2. An input 
state of the form \ty) = |vac) a ® evolves to \^>') = 

Ui |*) = (|l) fll |vac). - i|0) fli |l)p/V2. For the mo- 
ment, let fa = fa = and Ui — u 2 — 1I3. The second 
beam splitter is identical to the first, so the second transfor- 



mation U2 



exp 



m(u\g-\-u^)/A 



yields the relations 



wi = (g + iii3)/y/2 and W2 — (ii3 + ig)/y/2. The state which 
exits the interferometer is thus U 2 \^') = —i | l vac )u> 2 - ^ 
the source at s supplies the interferometer with single photons 
we should expect to observe 



|*) j+3 l% 2 l%.l*)i- 



(1) 



In this description, |\E') 1 represents the first photon which is 
emitted, |\J , ) 2 represents the second, etc. The correspond- 
ing detection events are given by (wi)i, (1111)2, etc. Now 
suppose an intruder simply crosses the perimeter. The state 
of the bottom arm is mixed during the time for which the 
fence path is blocked. After tracing over the fence branch 
the state of the lower arm is described by |^) ■ — > pj — 
i(|vac) g (vac| + |1) (1|), i.e., the field in the bottom arm is 
in a mixed state of zero and one photons. No interference oc- 
curs at the second beam splitter during the time for which the 
patrol arm is blocked. We will observe a decrease in the out- 
put flux at wi during this time. Specifically, if T denotes the 
input flux at s, the output flux at wi during the time for which 
the fence is blocked is given by J r /4. 

In what follows, we will assume that the sensor is sup- 
plied with photons emitted via parametric fluorescence H]|6]. 
Specifically, we will associate s with the signal mode of a 
down-conversion process. The idler mode i (not shown in 
the figure) will then serve as a heralding source for photon 
injection. If first-order processes dominate the interaction, a 
successful down-conversion can be approximated by the fol- 
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FIG. 1: Security protocol based on a balanced Mach-Zehnder in- 
terferometer. A side intrusion (SI) path-diversion attempt along the 
right side R is indicated with the red line. A cross intrusion (CI) 
diversion attempt from side L to T is depicted with the blue line. 



lowing two-photon state [6] (neglecting polarization) 

I*)pdc = f duidu2®(ui,U2)^(ui)i*{u2) I vac) , (2) 

where $(wi, w 2 ) is a suitable spectral amplitude distribution. 
Throughout, unless otherwise stated, the limits of integration 
are taken to be (-co, oo). Let | v E , ) PD c j denote the jth down- 
converted pair. Suppose we detect the jth idler photon at time 
t = tj. At this moment, the state of the signal field is obtained 
by projecting |^E , ) PDC j onto the state Q 



IVfe)) =C dui<(u))r)(u)e 2vi 



vac) 



(3) 



where C is a normalization constant and T}(u) represents the 
real spectral transfer function of the idler detector. Condi- 
tioned on a detection of the idler at time t = tj, the jth signal 
photon is injected into the interferometer in the state 



PDCJ 



C*J dujxd^vi^e" 2 "^ 
x$(wi,w 2 )s t (wi) I vac) . (4) 



Here we have used the continuous mode commutation rela- 



tion 



<5(w — &/). For simplicity, we will as- 
sume a monochromatic cw pump beam of frequency u> p , i.e., 
$(wi,u;2) oc 6(wi + UJ2 — u p )h [CAk(u)\, u; 2 )] . The phase- 
matching function h is given by 



h[CAk(u)j,u))] 



-iCAk(uj,uj)/2 



sinc(£Afc(o;i,a;2)/2), 



(5) 

and C denotes the crystal length. For frequency degenerate 
processes, we can apply a first-order Taylor expansion of the 
phase mismatch Afc(tJi, 0J2) around uj p /2. This yields 

Ak{u)\, uip — « (uii — Wp/2) x J, (6) 

where J := k' i&e[ (bJ p /2) — k' si } (uj p /2). The idler pass band 
function will be approximated as rj{uS) - 



where a > is a real parameter. We will also approximate 

_ 2 

sinc(x) ~ e " <x , with 7 = 0.193 . . . With these approxima- 
tions, the jth input state is given by 

pa C J due-^-^^e^^+t'h^u)) |vac) , (7) 

with the parameters /? := 1/er 2 — 7£ 2 J 2 /4, t' :— 
-CJ/Att, and C := C* e r 2 ^^ e ' CJu "/ 4 . The time- 
dependent mode operators are related to their frequency- 
dependent counterparts via the standard Fourier transform 
b(t) — J du>b(oj)e^ 2nlu ' t . This relation holds since we are 
assuming narrow band fields |8|. The Fourier transform of 
Eq. ^ has the form 



|$) M HI / dte -2™t(u p /2) e -M/0 

V p J 

X${tj + t' -t) I vac) , 



(8) 



where Ai is a new normalization constant. Upon detection 
of the jth idler at time t — tj, a photon is injected via mode 
s with a temporal distribution that oscillates with frequency 
oj p /2 under the Gaussian envelope centered at tj + If. The 
additional time advance/delay t' = —£J/4tt depends on the 
characteristics of the nonlinear medium supporting the down- 
conversion process. We will assume that t' has been ac- 
counted for by using compensators outside of the crystal and 
henceforth neglect its contribution. 

The time-dependent mode operators are related by 

g(t) = -L(fi(t) +«(*)), u 1 (t) = -L(s(t) + ia(t)), 
fi 2 (i) = e^u^t-tL), u 3 (t) = e^u 2 (t-t T ), 
wi(t) = -^(e^+^g(t-t B )+iu 3 (t-t R )), 

w 2 (t) = ±=(e^ + ^ + *^g{t~t B ) + u 3 {t-t R )). (9) 

In these expressions t^, tr, £r, and denote the time it takes 
for a photon to travel through arms L, T, R, and B respec- 
tively. Under normal operating conditions t^ = II/ c, tx = 
lr/c,tR = Ir/c, and t B = (It, + It + Ir)/c. We have also 
included the phase shifts which will be necessary for the pre- 
vention of certain intrusion attacks. For the present discus- 
sion, we may set <f>i = $2 = 0. 

Using the relations above, one can calculate the output flux 
atu)i(i) to be {w\(t)wi(t)) norma i = (s t (t - t B )s(t - t B )). 
This equation can be readily evaluated for | \P) •. We obtain 



u4(t)i&i(i)) n 



ormal — 



n\M\' 



p 



-(u~uj p / 2 y/a 2 



■exp[-2ir 2 {t 3 +t B -t) 2 /[3}. 

(10) 

As expected, under normal conditions (w\ (t)w\ (t)) is peaked 
at time t = tj + t B . Requiring / dt(w\ (t)wi(t)) norma i = 1 
yields M = (2/3/7r) 1/4 . With the state |*) ■ properly normal- 
ized, we may calculate the expectation value of the photon 
number arriving at uii within the resolving time T R of the de- 
tector. Conditioned on the jth herald, the detector will make a 
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measurement centered at time i ; = tj + t R - We expect to find 

rtj+tB+T R /2 

1-0 ■= / d.T(w\(T)w 1 (T)) norma l 
Jtj+tB-Tn/2 

= Erf(rwv^). (ii) 

with the definition Erf(x) := ^7= Jq dze~ z . The error func- 
tion Erf (Tr7t/v / 2/3) increases from zero to one as the factor 
Tr/^/J3 > increases. For T R > y/fi, 2 Q ks 1. Recall that 
P = 1/cr 2 —jC 2 J 2 /4cr and a determines the pass-band width 
of the idler detector. As a decreases, the idler frequency pass- 
band becomes tighter resulting in a broader temporal spread 
of the signal photon. Therefore, a smaller value for a requires 
a larger value of the resolving time Tr to capture the entire 
signal amplitude. 

Intrusion detection. — A clever intruder may attempt to fool 
the security device using path diversion or intercept-resend 



techniques. Let us first examine the case where a path redi- 
rection occurs along the same arm, i.e., the two points of con- 
tact to the original beam lie on either L,T, or R. Due to 
the straight line geometry of each branch, a diversion such 
as this will necessarily increase the optical path length. Us- 
ing Eq. ([9]), we may calculate (w\ (t)wi(t))si after the path 
length has been increased due to a side intrusion (SI): 

(i2>t(i)t&i(t)> SI = i<[st(i-t B ) + e -«st(i-(i B + A))] 
x [s(t - t B ) + e iS s(t - (t B + A))] ) (12) 

where A represents the additional flight time introduced as a 
result of the redirection, i.e., A = ft + ir + iR — is- The ad- 
ditional phase factor £ = 2ncA/X results from the additional 
path length, where c is the speed of light and A is the signal 
photon wavelength. For intrusions of this sort, the measured 
intensity is calculated to be 



rtj+tB+Tn/2 



(It(wI(t)wi(t)) 



ltj+tu-TR/2 



SI 



2X + Erf 



ir(2A + Tr) 



Erf 



tt(2A - Tr) 



28 



(Erf 


~Tr(A + T R y 


-Erf 


7r(A — Tr)' 


)] 




[ VW _ 




[ vw _ 





(13) 



r 



In Fig. [2] we plot an example of the intensity drop as a func- 
tion of the intrusion parameter A. In this example, we assume 
a pump beam centered at 400 nm and a detector resolving time 
of T R — y/J3 — .1 ns. We find that an additional path length 
increase > 1 cm results in a value of T\ equal to Zq /4. 
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FIG. 2: Plot of Xi as a function of A. We have taken the pump wave- 
length to be A = 400 nm and have set Tr — \f]5 — .1 ns. The 
intensity drops to 1/4 of the normal value around A = .1 ns, corre- 
sponding to a path length increase of ~ 1 cm. The expectation values 
(w|ix) 1 )s/ and {wlw 2 )si oscillate sinusoidally for small values of 
A. Once the diversion length becomes larger than the coherence 
length, the detection interval captures amplitudes propagating along 
the bottom arm alone. No interference occurs beyond this point and 
(wlu)2)si = 1/4 for increasing A. 



where a photon amplitude propagating through the long path 
matches up with a short path amplitude associated with a dif- 
ferent photon emitted from a later down-conversion. The two- 
photon input state corresponding to the jih and fcth heralds is 

|$) i)Jk = JjJ d X id X 2e-^ + x^e-^ + xW 

xs\tj -Xi)s f (*fc-X2)|vac). (14) 

In what follows we assume the condition tj — tk > Vfi is 
satisfied. We can enforce this condition with high probability 
by adjusting the pump strength. We then calculate 

(wl(t)Mt)h* = WMt) II 2 + IK(t) l*>* II 2 - (1 5 ) 



For completeness, we must consider the unlikely situation 



The expectation value of w\(t)wi(t) for the two-photon state 
|$) ■ k is the sum of the expectation values for |$) . and |^) fc . 
The advantage of using a random photon source comes from 
the unlikeliness of witnessing a continual sequence of emis- 
sions with temporal separation T = cAm, raeff. Therefore, 
in a diversion attack of this sort we expect the output flux to 
drop to 1/4 of the normal operating value for path diversion 
lengths necessary for human scale entry. When A = 0, the in- 
tegral of Eq. ( 15 1 over all time yields J dt(w\(t)wi(t)) j % — 
2. As expected, both photons emerge from w\ when there is 
no intrusion. 

Now consider the case where a diversion occurs between 
separate branches, e.g., from L to T. Since the optical path 
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length inside the secured region could be determined using 
a probe signal, it would be possible for an intruder to per- 
fectly match the original fence length in this case. Further- 
more, since the sum of the length of the two legs of a right 
triangle is greater than the length of its hypotenuse, it would 
be possible for an intruder to match the original fence length 
while also providing sufficient entry room for an intrusion to 
take place. For this reason, we include random phase shifts fa 
at the corners of the perimeter. The sequence of phase shift 
values in a particular location can be generated before acti- 
vation and stored as a string fa = (fa tl , fa y2 , fa,3> ■ • • , fa.N) 
(i = 1, 2). Suppose the length of the diverted path perfectly 
matches the original path length. In general, each diverted 
signal photon experiences an additional phase shift of e^ int . 
The mode relation between arms L and T is now given by 
U2(t) = e % ^ int u\(t — t£). For a cross intrusion (CI), we find 
the following expectation value 

(«>J(t)t&i(t)> j = v^T^exp^^tj+ts-t) 2 //?] 

X [1 + COS {(f> int ~ fa)} , (16) 

which reduces to Eq. ( [T0| when fa nt — fa. For a fixed fa, 
the average output flux drops to half of the normal rate 

— / / dtdfantiwli^W^ci = ^ (17) 

Z7T J<Pi n t=0 Jt=-oo Z 

Alternatively, we could generate phase shift values at the cor- 
ners using quantum random number generators (QRNGs). 
Suppose we remove the phase shifts fa + fa from the bottom 
arm and restrict the phase shift values at the corners to the set 
{0, 7t}. As each QRNG randomly selects between the values 
fa = 0,7r (i = 1,2) the expectation values for w\(t)wi(t) 
and w\(t)u)2{t) change accordingly. Under normal opera- 
tion s -t \ [e~ i ^ 1+ ^ 2) {w 2 -iwi)- (w 2 + iwi)] , where 
we have suppressed the time dependence for brevity. The 
four combinations for (fa, fa) lead to the detection events 
(0, 0), (71", 7r) => w\ and (0, tt), (tt, 0) w 2 . We can achieve 
relativistic security [9| by broadcasting the values (cf>i, fa) af- 
ter the detections at W\ and W2 have already been made. In 
this way we eliminate the previous requirement of "keeping 
secrets". In this protocol, the sequence of detections at wi 
and W2 are recorded and later compared to the expected val- 
ues after the broadcast has taken place. 

We now consider the intercept-resend approach. In this 
case, the intruder constructs a device that injects a single pho- 
ton (vacuum) into the fence branch if a photon is (is not) de- 
tected. In either case, the process of measuring the state of 
the perimeter ultimately destroys the superposition which was 
once present. A single photon will arrive at the second beam 
splitter, either from mode g or M3, but it will only have a 50% 
chance of arriving at the correct detector. This leads to an 
average output flux at Wi equal to Tq/2, Any intrusion at- 
tempt that determines whether a photon was present in the 
fence branch will result in an average flux at wi less than or 
equal to Zq/2. Notably, strategies based on teleportation fall 
into this category. 

Security tolerance. — The analysis above was based on a 
perfect, lossless implementation. In practice, this will not be 



the case. There will be some probability < pi < 1 for 
detecting a photon at port Wi conditioned on the jth herald 

rtj+tB+Tn/2 

I dT{w](T)Wi(T)) no rmal=Pi- (18) 

Jt 3 +t B -T R /2 

The sensor can operate in a realistic environment as long as 
p 2 remains much smaller than pi throughout normal, unin- 
terrupted operation. These probabilities can be determined 
experimentally by examining the statistics associated with 
N ^> 1 heralds. Let rij denote the number of clicks regis- 
tered at port Wj during the N detection intervals. (We assume 
no intrusion at this stage.) We can then define pj := rij/N 
to be our expectation values. We will also define the expected 
and measured averages over any N future heralding events by 

I N rtj+t B +T R /2 

A exp ,i ■= ITf'Y] / dT{wl(T)Wi(T)} norma l, 
iV j=l Jt J +t B ~T R /2 

I N rtj+t B +T R /2 

A mea ,i ■= it; ^ / dr{w\ (r)t&i(r)) mea ,(19) 

J = l Jt 3 +t B -T R /2 

with A exPt i — pi- For some values Tj € R, we have 
A e xp,i — A m ea,i '■= Tj Iq. In an ideal setting, with no photon 
loss or dephasing, and no intrusion, I\ = for both i = 1,2. 
In a realistic setting, typical values for Ti associated with spe- 
cific intrusion techniques would need to be determined exper- 
imentally. Once they were identified, a user could specify se- 
curity tolerances Ci > that prompt an alarm when j > e^. 
Alternatively, the user could define < v < 1 to be the se- 
curity tolerance and then constantly measure and update the 
quantity 9 := - for a predetermined value of N. When 
< v, an alarm is set signaling an intrusion. 

Conclusion. — We have presented a method for detecting 
intrusion across an optically defined perimeter using the MZI 
effect. In an ideal setting, any human-scale intrusion attempt 
will lead to a decreased value of the output flux emitted from 
the "bright" port of a balanced Mach-Zehnder interferome- 
ter by at least half of the normal operating value. In a realistic 
setting, the interferometer can still function as an intrusion de- 
tection device as long as a large discrepancy remains between 
the normal flux values of the two outputs. This work comple- 
ments recent studies related to the emerging field of quantum- 
based security (4J [5] [TO] and closely resembles a similar ap- 
proach to realizing intrusion detection using quantum interfer- 
ence iflOl . However, we assume here that the location of the 
tripwire is publicly known, e.g., interlaced with an ordinary 
fence via optical fibers. We expect additional work will pro- 
vide greater clarity into the sensing power of this approach, 
especially with respect to actively tampered optical seals. 
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